Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3132342e302f32342d3234203d3e2035363530.roa
File: 34372e3134332e3132342e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: 6Xhy8K8p61FkKoYZualKMhEHZX/OdMBk+7YY4smnboE=
Subject key identifier: 2C:D0:CA:CE:E3:1E:D0:71:CD:C3:D8:17:05:77:49:A5:AC:A8:5C:ED
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 474D154461746E0827363B395FC778399C2265B0
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3132342e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:18:29 +0000
ROA not before: Thu 02 Nov 2023 11:13:29 +0000
ROA not after: Thu 31 Oct 2024 11:18:29 +0000
asID: 5650
IP address blocks: 47.143.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:4d:15:44:61:74:6e:08:27:36:3b:39:5f:c7:78:39:9c:22:65:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Nov 2 11:13:29 2023 GMT
Not After : Oct 31 11:18:29 2024 GMT
Subject: CN=2CD0CACEE31ED071CDC3D817057749A5ACA85CED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d9:cc:54:70:d1:37:3b:0e:d5:25:a7:63:32:
d4:c9:40:77:6c:d8:98:42:c9:83:86:3d:f3:92:78:
76:76:67:90:e1:0c:0d:6e:f0:76:ec:94:32:2b:6b:
9a:87:54:aa:b8:83:2d:2a:1b:f0:33:03:6c:85:1c:
f3:5d:af:9d:4d:8e:b3:e6:3a:b6:ee:38:8e:29:bd:
92:9c:77:e5:5b:a7:b2:2c:cc:a4:76:6f:bc:0b:76:
2f:ec:11:39:3e:dd:9b:f5:00:98:9f:ec:e8:1d:89:
33:ee:93:39:33:2e:19:3d:1e:f7:a0:57:39:db:0b:
09:ae:1e:30:32:8d:5c:c3:67:c8:20:6d:f9:ec:ec:
b3:30:58:9a:4b:e2:b1:52:61:ff:26:39:05:8a:1a:
d6:da:81:0b:34:8c:62:6b:42:24:e5:5e:74:4d:31:
6d:c8:91:2d:c3:29:36:d7:3f:af:a1:da:04:b8:72:
0e:f1:d4:c0:65:9d:4f:c0:d4:84:52:37:ac:c1:09:
9b:54:10:a2:1d:38:2d:e0:c4:90:5e:47:60:c8:97:
92:71:75:f6:46:31:da:75:26:bc:0c:0a:cf:d1:6d:
86:eb:fc:be:ce:b4:97:3a:cb:e9:d8:b6:dd:75:90:
4b:ba:24:2b:5c:c9:a2:3a:bb:bd:d9:3a:7d:83:de:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D0:CA:CE:E3:1E:D0:71:CD:C3:D8:17:05:77:49:A5:AC:A8:5C:ED
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3132342e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.143.124.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8f:f6:ef:4c:bf:bc:02:07:01:0a:bb:71:9f:18:0c:c9:58:
f2:8e:bf:a0:1a:eb:a5:af:be:9d:fc:63:20:74:f9:3d:53:c1:
f6:09:e8:67:e0:65:c3:4a:e1:2e:67:5a:a3:af:e3:5e:fd:a3:
02:74:d2:92:8d:b1:0b:37:7f:80:e1:66:92:60:af:19:88:32:
44:82:91:96:ca:6c:14:86:c8:18:23:66:e3:27:d4:c6:ea:78:
b8:ae:d1:26:ba:c8:a8:fe:85:f1:e7:d7:76:c4:c6:cd:fe:fe:
f3:99:a1:9a:e5:8f:21:ec:1b:2c:25:e4:e4:e4:5b:a2:5e:bc:
5d:ac:88:75:85:26:8a:92:04:db:44:5a:87:fa:f2:e7:ce:a6:
b0:d4:8a:8a:d3:e7:c8:62:88:08:a3:93:06:07:e1:cf:b7:70:
6e:3e:e5:12:e2:4a:45:e6:cf:61:17:bf:27:79:72:99:8b:52:
d0:4d:9c:90:b6:c6:ec:ff:c0:b0:8a:d5:32:e2:a1:b4:85:dd:
2a:8f:53:f6:1a:8a:9b:57:0b:77:c1:84:0a:d0:32:d7:51:42:
eb:14:79:4f:0a:05:e6:61:db:4e:35:8f:e9:a8:d1:53:ef:9b:
e2:80:a0:ea:66:96:c7:8f:59:48:ee:b4:26:4b:4b:b1:e1:84:
a8:e9:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org